This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/OaOnlwyLcpWU-7buhAK-DPuoYYM.roa File: OaOnlwyLcpWU-7buhAK-DPuoYYM.roa (raw, json) Hash identifier: 5Ar9cfFUzYqjwJSn+ec2xqE01xE8RezzqQw0pyKzfD4= Subject key identifier: 39:A3:A7:97:0C:8B:72:95:94:FB:B6:EE:84:02:BE:0C:FB:A8:61:83 Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Certificate serial: 019B7AC84C9F8E4F9B9F834F3F3B0FD0DBAD Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/OaOnlwyLcpWU-7buhAK-DPuoYYM.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208451 IP address blocks: 45.132.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4c:9f:8e:4f:9b:9f:83:4f:3f:3b:0f:d0:db:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39a3a7970c8b729594fbb6ee8402be0cfba86183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:c0:a0:58:37:d6:ae:2a:f0:b7:f5:a0:7b: 23:0c:2c:aa:20:d0:27:79:89:70:ae:0d:b4:14:9a: 36:ce:1f:2a:5f:bf:6d:f3:44:12:17:20:fa:a7:79: 2f:40:4d:04:2c:65:57:38:11:73:b2:6b:14:6c:96: a2:84:35:ad:23:cf:57:f2:68:14:d8:08:1e:49:85: 0e:06:81:aa:26:2b:8c:5f:d1:86:d5:bb:9d:49:15: a1:fc:3a:ce:1f:1c:23:00:08:6b:99:f8:cd:9a:ae: 3c:2b:c7:89:cf:c7:3e:54:62:d7:c8:36:e8:72:f0: a5:42:07:6b:f8:53:f6:02:23:56:61:0a:3b:ba:05: 1a:f0:ec:cc:d8:11:fe:e3:85:9a:37:71:04:00:2c: 38:2a:f0:22:db:28:ea:13:b6:27:a1:4c:b9:ed:de: d2:44:d6:69:73:11:f3:cf:aa:28:8d:83:ba:1f:f3: 32:23:d1:4c:4c:53:7e:1f:4f:e5:47:58:fa:b7:7c: a7:0a:1f:8f:64:69:fe:09:0e:18:48:11:33:4e:ed: b1:1e:5b:c9:7f:aa:25:59:d8:ea:4f:91:39:a5:f4: 5f:86:9b:68:5d:8b:ae:b4:f7:53:5a:b4:59:0b:a9: 14:57:bf:f6:f1:ee:c6:dd:33:61:44:6a:03:ca:71: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:A7:97:0C:8B:72:95:94:FB:B6:EE:84:02:BE:0C:FB:A8:61:83 X509v3 Authority Key Identifier: keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/OaOnlwyLcpWU-7buhAK-DPuoYYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.116.0/22 Signature Algorithm: sha256WithRSAEncryption 25:f3:78:58:50:14:c3:d7:34:9f:7d:f4:90:09:f0:10:30:2d: c9:fe:d1:0b:15:3f:31:4b:a7:2f:6d:63:57:5c:03:83:db:92: 88:6b:46:83:74:f4:d8:2d:1c:91:ca:5c:79:25:9c:29:8b:f1: 01:36:4f:60:f2:57:90:13:4b:3f:37:86:a0:61:97:19:df:92: cb:d6:c5:6c:d2:e5:98:d9:5b:de:b3:d6:3d:6b:e2:d9:fe:66: b3:98:df:d6:c1:58:90:4c:a6:73:e6:e7:b1:d1:c7:c3:c1:0f: 68:16:a1:d3:98:07:57:51:0b:19:7f:f5:d0:1b:c1:5a:66:b7: 37:f3:39:33:4c:b0:d9:66:84:83:54:a8:8b:a1:2a:55:1e:94: 31:f5:50:b6:85:72:95:3b:62:0a:97:06:2c:52:78:dd:b7:70: a5:5e:7e:19:36:d8:8b:73:5f:d1:51:fb:65:39:34:0d:dd:85: 93:47:9e:ee:6b:da:80:f0:6d:15:d5:49:7d:53:46:02:bd:f8: c2:65:25:19:1e:3d:6e:de:db:f5:1e:ed:6c:49:63:c7:80:e5: 84:9b:d4:05:31:dc:84:5b:52:36:09:6f:cf:5a:f1:74:fd:1b: b7:55:c0:7c:60:e7:fd:21:d7:d6:19:c8:ba:24:b3:ac:04:3b: c3:26:c0:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEyfjk+bn4NPPzsP0NutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux NTQ1ZWQwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWEzYTc5NzBjOGI3Mjk1OTRmYmI2ZWU4NDAyYmUwY2ZiYTg2MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIPAoFg31q4q8Lf1oHsjDCyqINAn eYlwrg20FJo2zh8qX79t80QSFyD6p3kvQE0ELGVXOBFzsmsUbJaihDWtI89X8mgU 2AgeSYUOBoGqJiuMX9GG1budSRWh/DrOHxwjAAhrmfjNmq48K8eJz8c+VGLXyDbo cvClQgdr+FP2AiNWYQo7ugUa8OzM2BH+44WaN3EEACw4KvAi2yjqE7YnoUy57d7S RNZpcxHzz6oojYO6H/MyI9FMTFN+H0/lR1j6t3ynCh+PZGn+CQ4YSBEzTu2xHlvJ f6olWdjqT5E5pfRfhptoXYuutPdTWrRZC6kUV7/28e7G3TNhRGoDynGq0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmjp5cMi3KVlPu27oQCvgz7qGGDMB8GA1UdIwQY MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt ZjQ4OTMwZTQyNjQxLzEvT2FPbmx3eUxjcFdVLTdidWhBSy1EUHVvWVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYR0MA0G CSqGSIb3DQEBCwUAA4IBAQAl83hYUBTD1zSfffSQCfAQMC3J/tELFT8xS6cvbWNX XAOD25KIa0aDdPTYLRyRylx5JZwpi/EBNk9g8leQE0s/N4agYZcZ35LL1sVs0uWY 2Vves9Y9a+LZ/mazmN/WwViQTKZz5uex0cfDwQ9oFqHTmAdXUQsZf/XQG8FaZrc3 8zkzTLDZZoSDVKiLoSpVHpQx9VC2hXKVO2IKlwYsUnjdt3ClXn4ZNtiLc1/RUftl OTQN3YWTR57ua9qA8G0V1Ul9U0YCvfjCZSUZHj1u3tv1Hu1sSWPHgOWEm9QFMdyE W1I2CW/PWvF0/Ru3VcB8YOf9IdfWGci6JLOsBDvDJsCZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:21 2026 by rpki-client